INFO: rcu detected stall in vm_mmap_pgoff (2)

Status: upstream: reported on 2026/09/10 17:42
Reported-by: syzbot+8e05a426924ff08c0051@syzkaller.appspotmail.com
First crash: 2d10h, last: 2d10h
Similar bugs (5)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 INFO: rcu detected stall in vm_mmap_pgoff (3) 1 2 45d 56d 0/3 upstream: reported on 2026/07/18 17:44
linux-6.6 INFO: rcu detected stall in vm_mmap_pgoff 1 11 150d 423d 0/2 auto-obsoleted due to no activity on 2026/07/24 18:00
upstream INFO: rcu detected stall in vm_mmap_pgoff prio:normal mm 1 syz 123 3d19h 762d 0/29 upstream: reported syz repro on 2024/08/11 07:12
linux-6.1 INFO: rcu detected stall in vm_mmap_pgoff 1 19 291d 812d 0/3 auto-obsoleted due to no activity on 2026/03/05 17:16
linux-6.1 INFO: rcu detected stall in vm_mmap_pgoff (2) 1 1 163d 163d 0/3 auto-obsoleted due to no activity on 2026/07/11 19:17

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P20299/2:b..l
rcu: 	(detected by 0, t=10502 jiffies, g=135789, q=612 ncpus=1)
task:syz.7.4142      state:R  running task     stack:26120 pid:20299 ppid:19450  flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x15ae/0x4660 kernel/sched/core.c:6701
 preempt_schedule_irq+0xbf/0x150 kernel/sched/core.c:7011
 irqentry_exit+0x67/0x70 kernel/entry/common.c:438
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:arch_test_and_set_bit arch/x86/include/asm/bitops.h:138 [inline]
RIP: 0010:arch_test_and_set_bit_lock arch/x86/include/asm/bitops.h:144 [inline]
RIP: 0010:test_and_set_bit_lock include/asm-generic/bitops/instrumented-lock.h:58 [inline]
RIP: 0010:folio_trylock include/linux/pagemap.h:1037 [inline]
RIP: 0010:next_uptodate_folio+0x33e/0xb20 mm/filemap.c:3500
Code: ff 49 83 e6 01 0f 85 6d 07 00 00 0f 1f 44 00 00 e8 f7 79 d0 ff 48 89 df be 08 00 00 00 e8 4a fd 28 00 31 f6 f0 48 0f ba 2b 00 <41> 0f 93 c6 40 0f 92 c6 bf 02 00 00 00 e8 60 7c d0 ff 45 84 f6 75
RSP: 0018:ffffc9000507f748 EFLAGS: 00000246
RAX: ffffffff81b70801 RBX: ffffea000158f5c0 RCX: ffffffff81b70886
RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffea000158f5c0
RBP: 1ffffd40002b1eb8 R08: ffffea000158f5c7 R09: 1ffffd40002b1eb8
R10: dffffc0000000000 R11: fffff940002b1eb9 R12: ffffc9000507f880
R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffffd40002b1eb9
 filemap_map_pages+0x29a/0x19c0 mm/filemap.c:3628
 do_fault_around mm/memory.c:4595 [inline]
 do_read_fault mm/memory.c:4628 [inline]
 do_fault mm/memory.c:4775 [inline]
 do_pte_missing mm/memory.c:3689 [inline]
 handle_pte_fault mm/memory.c:5047 [inline]
 __handle_mm_fault mm/memory.c:5188 [inline]
 handle_mm_fault+0x384b/0x4a50 mm/memory.c:5353
 faultin_page mm/gup.c:868 [inline]
 __get_user_pages+0x604/0x1580 mm/gup.c:1167
 populate_vma_page_range+0x2c1/0x380 mm/gup.c:1593
 __mm_populate+0x260/0x390 mm/gup.c:1696
 mm_populate include/linux/mm.h:3383 [inline]
 vm_mmap_pgoff+0x2da/0x3f0 mm/util.c:561
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2f1dd9e159
RSP: 002b:00007f2f1ec5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007f2f1e025fa0 RCX: 00007f2f1dd9e159
RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000
RBP: 00007f2f1de3503b R08: ffffffffffffffff R09: 000000004eee9000
R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f2f1e026038 R14: 00007f2f1e025fa0 R15: 00007ffdbf1c1d98
 </TASK>
rcu: rcu_preempt kthread starved for 10498 jiffies! g135789 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:25960 pid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x15ae/0x4660 kernel/sched/core.c:6701
 schedule+0xbd/0x170 kernel/sched/core.c:6775
 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168
 rcu_gp_fqs_loop+0x30d/0x1590 kernel/rcu/tree.c:1667
 rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866
 kthread+0x2fa/0x390 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 PID: 20306 Comm: syz.2.4143 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:vmx_do_interrupt_irqoff+0x14/0x20 arch/x86/kvm/vmx/vmenter.S:366
Code: 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 13 10 6a 09 cc cc cc 66 0f 1f 00 55 48 89 e5 48 83 e4 f0 6a 18 55 9c 6a 10 ff d7 <48> 89 ec 5d c3 cc cc cc cc cc cc cc f3 0f 1e fa 55 48 89 e5 41 57
RSP: 0018:ffffc9000516f3b0 EFLAGS: 00000082
RAX: ffffffff00000000 RBX: ffff88805826d180 RCX: 0000000000080000
RDX: 0000000000001430 RSI: 000000000007ffff RDI: ffffffff8aa01430
RBP: ffffc9000516f3b0 R08: ffff888024a1bc00 R09: 0000000000000002
R10: 0000000000000001 R11: 0000000000000002 R12: 1ffff92000a2de7c
R13: dffffc0000000000 R14: fffffe0000000ec8 R15: fffffe0000000ecb
FS:  00007f1026e5d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000005eedd000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 handle_external_interrupt_irqoff arch/x86/kvm/vmx/vmx.c:7015 [inline]
 vmx_handle_exit_irqoff+0x2b3/0x8f0 arch/x86/kvm/vmx/vmx.c:7029
 vcpu_enter_guest arch/x86/kvm/x86.c:10925 [inline]
 vcpu_run+0x468c/0x7640 arch/x86/kvm/x86.c:11085
 kvm_arch_vcpu_ioctl_run+0x1005/0x18b0 arch/x86/kvm/x86.c:11314
 kvm_vcpu_ioctl+0x98a/0xd00 virt/kvm/kvm_main.c:4164
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:871 [inline]
 __se_sys_ioctl+0xfd/0x170 fs/ioctl.c:857
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f1025f9e159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1026e5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f1026225fa0 RCX: 00007f1025f9e159
RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
RBP: 00007f102603503b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1026226038 R14: 00007f1026225fa0 R15: 00007ffc1aac6d88
 </TASK>

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/10 17:42 linux-6.6.y 8b73de7da85f 1fe56c0a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan INFO: rcu detected stall in vm_mmap_pgoff
* Struck through repros no longer work on HEAD.